bashclub/piler
1
0
Fork 0
mirror of https://bitbucket.org/jsuto/piler.git synced 2024-12-25 17:40:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

prevent logging in without @ in the email address via imap and pop3 auth methods

Browse Source
This commit is contained in:
SJ 2013-12-04 13:26:05 +01:00
parent e133a41570
commit c0e1bec960
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
webui/model/user/auth.php
View File

@ -253,7 +253,7 @@ class ModelUserAuth extends Model {
private function checkLoginAgainstIMAP($username = '', $password = '') { private function checkLoginAgainstIMAP($username = '', $password = '') {
$session = Registry::get('session'); $session = Registry::get('session');
$user = array(); if(!strchr($username, '@')) { return 0; }
$imap = new Zend_Mail_Protocol_Imap(IMAP_HOST, IMAP_PORT, IMAP_SSL); $imap = new Zend_Mail_Protocol_Imap(IMAP_HOST, IMAP_PORT, IMAP_SSL);
if($imap->login($username, $password)) { if($imap->login($username, $password)) {
@ -271,7 +271,6 @@ class ModelUserAuth extends Model {
private function checkLoginAgainstPOP3($username = '', $password = '') { private function checkLoginAgainstPOP3($username = '', $password = '') {
$user = array();
$rc = 0; $rc = 0;
try { try {